LemmyToday

318 readers

20 users here now

If you experience issues or problems with this instance (lemmy.today), this is the place to discuss them. Or if you just want to ask questions about how something works. Anything related to the instance or lemmy itself.

founded 2 years ago

MODERATORS

mrmanager@lemmy.today

Bots overloading old.lemmy.today (lemmy.today)

submitted 3 days ago* (last edited 1 day ago) by mrmanager@lemmy.today to c/lemmytoday@lemmy.today

59 comments fedilink hide all child comments

Hi,

We had a DDOS attack against old.lemmy.today which overloaded the entire server for about 20 minutes. I had to turn off old.lemmy.today temporarily and will look through logs and probably block more chinese ip ranges, since thats where it came from.

Always something to do. :) Keeping this as sticky for a while to inform everyone.

Edit: I added more ip blocks for Chinese networks and hopefully it will keep future bots away. Bringing up the old.lemmy.today user interface again...

Edit 2: Had to take it down again due to massive bot scraping. Currently down.

you are viewing a single comment's thread
view the rest of the comments

[–] db0@lemmy.dbzer0.com 5 points 2 days ago (1 children)

Look into pow protection. The Chinese botnets come from a practically infinite range at the moment

[–] mrmanager@lemmy.today 4 points 2 days ago (1 children)

Thank you, I was reading about pow protection and finding out more about it. Is there some local software you could recommend? I'm not too hot on cloudflare or other big tech services unless absolutely needed.

[–] db0@lemmy.dbzer0.com 4 points 2 days ago (1 children)

What is your reverse proxy software?

[–] mrmanager@lemmy.today 3 points 2 days ago (1 children)

Just nginx.

[–] db0@lemmy.dbzer0.com 4 points 2 days ago (2 children)

You can look into Anubis then.

[–] mrmanager@lemmy.today 2 points 1 day ago* (last edited 1 day ago) (1 children)

I added Anubis for https://old.lemmy.today/ and will see if it helps the situation. Bots are hammering it pretty hard but they are not getting any lemmy content at least. Thank you for your advice. :)

[–] db0@lemmy.dbzer0.com 2 points 1 day ago (1 children)

Glad to hear it. We use PoW to protect all endpoints which have a lot of load and cannot be cached anyway. The bots don't just hit old, they hit all of them.

[–] mrmanager@lemmy.today 1 points 1 day ago

Yeah, this is just a start. :)

[–] mrmanager@lemmy.today 2 points 2 days ago

Much appreciated sir. :)